Account linking with privacy keys

• US 7,747,540 B2
• Filed: 02/24/2006
• Issued: 06/29/2010
• Est. Priority Date: 02/24/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Nanda, Arun K., Cameron, Kim
• Primary Examiner(s): Fischer; Andrew J.
• Assistant Examiner(s): Johns; Christopher C
• Application Number:
  US11/361,780
• Publication Number:
  US 20070203848A1
• Time in Patent Office: 1,586 Days
• Field of Search: 726 6- 10, 713/168, 713/171, 705/67
• US Class Current: 705/67
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction

Abstract

A computer system includes a security module programmed to generate a first privacy key for use with secure communications with a first web site, and a second privacy key for use with secure communications with a second web site, the first and second keys being different. The computer system also includes an identity module programmed to receive a request from the first web site for linking a first user account associated with the first web site with a second user account associated with the second web site, and the identity module being programmed to present a user with an option to link the first and second user accounts.

Claims

1. A computer system, the computer system comprising:

a processor unit; and

a computer-readable storage medium storing instructions that, when executed by the processor unit, cause the processor unit to;

generate a first encryption key and a second encryption key different from the first encryption key, the computer system using the first encryption key to encrypt communications with a first web site, and the computer system using the second encryption key to encrypt communications with a second web site;

receive a request to link a first user account with a second user account, the computer system receiving the request from the first web site, the first user account being associated with the first web site, the second user account being associated with the second web site;

present a first option to link the first user account and the second user account, the first option being presented to a user of the computer system;

generate a coupon comprising a linking agreement, the first encryption key, and the second encryption key in response to the user of the computer system approving linking between the first user account and the second user account;

present a second option to the user of the computer system to forward the coupon to the first web site directly from the computer system; and

forward the coupon to the first web site when the user selects the second option.

2. The computer system of claim 1, wherein the request for the linking of the first and second user accounts from the first web site includes a policy defining how information in the first and second user accounts will be shared between the first and second web sites.

3. The computer system of claim 1, wherein the request from the first web site includes requests for linking accounts from a plurality of web sites, and wherein a search is performed for one or more digital identities on the computer system that match one or more of the plurality of web sites.

4. The computer system of claim 3, wherein the user of the computer system is presented with options for linking user accounts associated with matching digital identities.

5. A method for communicating with a plurality of web site devices, the method comprising:

generating, at a computer system, an encryption key for encrypting communications with each of the plurality of web site devices, wherein a unique encryption key is generated and associated with each of the plurality of web site devices;

receiving, at the computer system, a request for account linking from a first web site device of the plurality of web site devices to share user information with at least a second web site device of the plurality of web site devices;

searching, at the computer system, for digital identities associated with a user that match the first web site device and the at least a second web site device;

presenting, at the computer system, the user with an option to approve or disapprove of the account linking for web site devices with matching digital identities;

generating, at the computer system, a coupon in response to the user approving of the account linking, the coupon facilitating the account linking and including a linking agreement and at least a first encryption key associated with the first web site device and a second encryption key associated with the at least a second web site device;

presenting an option to the user of the computer system to forward the coupon to the first web site device directly from the computer system; and

forwarding the coupon to the first web site when the user selects the option.

6. A method for a first web site device to link user accounts with a second web site device, the method comprising:

sending a request for account linking to a user computer system from the first web site device to share user information with the second web site device;

receiving a response at the first web site device from the user computer system approving of the account linking;

forwarding a coupon generated by the user computer system from the user computer system to the second web site device to initiate the account linking, the coupon including a linking agreement, a first encryption key associated with the first web site device, and a second encryption key associated with the second web site device, the first and second encryption keys being different and being used to encrypt communications with the first and second web site devices, respectively;

presenting an option to a user of the user computer system to forward the coupon to the first web site device directly from the user computer system; and

forwarding the coupon to the first web site when the user selects the option.

7. The method of claim 6, further comprising receiving, at the first web site device, the coupon from the user computer system.

8. The method of claim 6, further comprising verifying the coupon at the first web site device.

9. The method of claim 6, wherein sending the request further comprises sending the request for the account linking during a registration process of the first web site device for the user computer system.

10. The method of claim 6, wherein sending the request further comprising sending a policy to the user, the policy defining how the user information is shared with the second web site device.